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Abstract 

In a method of returning change to a payer in an electronic payment system, a payer 
determines a change return value, generates and blinds a change return certificate, generates 
a first signature by signing the blinded change return certificate, and sends a message 
comprising the first signature to a payee. The payee forwards the message to a payment 
provider. The payment provider verifies the first signature and the change return value 
indicated by the message, generates a blinded second signature by signing the blinded 
change return certificate, and forwards the blinded second signature to the payer. The 
payer unblinds and verifies the blinded second signature, and forms a second payment 
certificate. A method of performing tasks of a payer, a method of performing tasks of a 
payment provider in a change return transaction, and computer programs and devices 
therefor axe also disclosed. 
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